Evidence · DiggingBeagle record
Global Digital Asset Threat Report, Q2 2026 — Bankr AI Prompt Injection
Fireblocks threat report describing the May 4 Bankr/Grok prompt-injection incident, including the multi-agent instruction path, unauthorized transfer of about 3 billion DRB and reported partial recovery. It is independent industry reporting, not a Bankr post-mortem.
- Published
- 2026-08 (month precision)
- Source role
- secondary reporting
Evidence record
Fireblocks threat report describing the May 4 Bankr/Grok prompt-injection incident, including the multi-agent instruction path, unauthorized transfer of about 3 billion DRB and reported partial recovery. It is independent industry reporting, not a Bankr post-mortem.
Claim-level citations (2)
- supportsPublic text crossed the Grok–Bankr boundary and triggered a real on-chain transfer: On May 4, 2026, the Grok–Bankr agent chain executed an unauthorized transfer of about 3 billion DRB on Base after attacker-controlled encoded text was decoded into a transfer instruction.
Section 'Bankr AI Prompt Injection'
- supportsPublic text crossed the Grok–Bankr boundary and triggered a real on-chain transfer: The documented mechanism was abuse of the AI-agent permission chain rather than theft of the wallet's private key or exploitation of a smart-contract vulnerability.
Section 'Root cause'
Cite this record
DiggingBeagle. “Global Digital Asset Threat Report, Q2 2026 — Bankr AI Prompt Injection.” Published 2026-08 (month precision). https://diggingbeagle.com/sources/global-digital-asset-threat-report-q2-2026-bankr-prompt-injection/